CVE-2022-22836

MEDIUM CVSS: 6.5 Published: 2022-01-10 Modified: 2026-06-17

Description

CoreFTP Server before 727 allows directory traversal (for file creation) by an authenticated attacker via ../ in an HTTP PUT request.

Affected Platforms

Coreftp Core Ftp

Weakness Type

CWE-22

References